$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: GMx5aeNZ7QOaM1dKbxTza8mCD9vc0cWrSlnRvpwIOGA= Subject key identifier: 7A:35:9C:C8:3B:75:9D:85:9F:5B:44:E9:54:1D:BD:10:C3:90:FB:65 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 72A0F8D96A980B4358C6451B28B93F247571F427 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04E4 Signing time: Tue 24 Mar 2026 11:12:15 +0000 Manifest this update: Tue 24 Mar 2026 11:07:15 +0000 Manifest next update: Fri 27 Mar 2026 20:40:15 +0000 Files and hashes: 1: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 2: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: 5E5wZYayidCSWF1RTd+BdvRBcG+BKa0HBwIv7TmKZ6U=) 3: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 4: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 5: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a0:f8:d9:6a:98:0b:43:58:c6:45:1b:28:b9:3f:24:75:71:f4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Mar 24 11:07:15 2026 GMT Not After : Mar 27 20:40:15 2026 GMT Subject: CN=7A359CC83B759D859F5B44E9541DBD10C390FB65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:30:ad:f3:90:e9:9e:e8:10:4e:42:04:7e: ed:8a:eb:fa:d7:ab:a5:fc:f6:1f:b3:48:e0:79:53: 59:ce:ce:eb:58:e5:1b:31:f3:35:86:8b:75:18:2f: 07:84:06:1e:a0:b6:4b:1d:5d:b0:b0:c7:0a:e0:17: 25:74:37:30:42:b5:e5:26:1a:82:64:00:3a:7f:85: 2e:7f:bc:19:56:e1:52:e1:c3:bf:8c:2c:3b:10:0c: 83:d4:86:2a:76:35:e2:0a:43:d4:67:c7:cb:45:22: e7:19:14:9d:83:2f:cc:e7:ac:8e:d5:a9:99:3f:a0: 9b:6e:9b:81:de:7a:a2:f5:ee:f1:bf:53:40:00:70: 4f:00:8f:b7:b4:ea:30:a9:49:86:08:ae:a1:84:f8: 4d:c0:88:fa:32:d3:5a:3e:fb:4e:ed:dc:78:03:5e: b1:45:12:bf:5c:1f:a8:6a:31:96:5b:1e:f5:bc:5a: 20:5d:89:50:7d:23:d2:42:9a:ae:62:29:08:ef:49: 89:02:88:d4:85:fd:dc:c2:ba:4c:cb:5e:40:ec:3c: ea:67:ba:f1:ac:6d:c1:a4:0b:bb:87:4c:59:df:14: 58:ea:5b:df:55:0e:6f:c4:1e:94:ec:97:56:01:f6: f4:9f:12:b2:d6:f8:59:9f:2d:29:bd:ef:b2:df:3f: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:9C:C8:3B:75:9D:85:9F:5B:44:E9:54:1D:BD:10:C3:90:FB:65 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:65:25:44:23:d2:60:dc:54:3d:30:4a:44:ae:6e:18:81:e4: ca:c6:60:1e:6b:c1:6f:58:3d:14:9f:67:72:6b:35:7d:60:81: 08:06:79:a6:32:a1:9e:0f:27:92:37:3d:80:c9:22:00:c3:83: 2f:d3:c2:e8:bf:cc:2b:4d:db:cd:7e:c5:5f:75:ad:f0:0a:1f: 30:7f:9e:f1:ca:d7:53:1b:53:be:02:02:11:42:a0:b4:7b:78: bc:8d:be:f6:aa:09:f3:d3:74:dc:ae:27:52:eb:1d:96:eb:ff: 46:ab:f9:18:38:c0:06:31:de:ac:0a:90:a7:c2:d2:88:01:94: 46:fa:19:6e:4e:4e:c3:a3:01:10:0d:40:c9:29:00:15:af:ac: 0f:1e:5a:a7:45:f2:6e:70:24:b2:ef:57:37:5d:d4:77:02:66: da:0a:e0:15:b6:01:df:09:7d:22:31:31:66:06:6e:a7:f9:56: a8:ba:9a:d7:2a:cf:ad:db:ed:68:ed:51:f4:f6:c6:2b:7a:56: f6:e8:92:1e:e3:66:45:3b:85:48:2d:ec:d1:1e:45:1e:24:f1: 56:12:b9:ba:5e:84:a3:e5:8d:e3:99:cd:6b:1c:2c:64:12:e8: 75:90:ff:69:f9:4b:0c:1a:9a:3e:bb:7f:c7:c6:73:8c:cf:20: bb:58:49:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqD42WqYC0NYxkUbKLk/JHVx9CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNjAzMjQxMTA3MTVaFw0yNjAzMjcyMDQwMTVaMDMxMTAvBgNV BAMTKDdBMzU5Q0M4M0I3NTlEODU5RjVCNDRFOTU0MURCRDEwQzM5MEZCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqTCt85DpnugQTkIEfu2K6/rX q6X89h+zSOB5U1nOzutY5Rsx8zWGi3UYLweEBh6gtksdXbCwxwrgFyV0NzBCteUm GoJkADp/hS5/vBlW4VLhw7+MLDsQDIPUhip2NeIKQ9Rnx8tFIucZFJ2DL8znrI7V qZk/oJtum4HeeqL17vG/U0AAcE8Aj7e06jCpSYYIrqGE+E3AiPoy01o++07t3HgD XrFFEr9cH6hqMZZbHvW8WiBdiVB9I9JCmq5iKQjvSYkCiNSF/dzCukzLXkDsPOpn uvGsbcGkC7uHTFnfFFjqW99VDm/EHpTsl1YB9vSfErLW+FmfLSm977LfP77jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUejWcyDt1nYWfW0TpVB29EMOQ+2UwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVlJUQj0mDcVD0wSkSubhiB5MrGYB5rwW9Y PRSfZ3JrNX1ggQgGeaYyoZ4PJ5I3PYDJIgDDgy/Twui/zCtN281+xV91rfAKHzB/ nvHK11MbU74CAhFCoLR7eLyNvvaqCfPTdNyuJ1LrHZbr/0ar+Rg4wAYx3qwKkKfC 0ogBlEb6GW5OTsOjARANQMkpABWvrA8eWqdF8m5wJLLvVzdd1HcCZtoK4BW2Ad8J fSIxMWYGbqf5Vqi6mtcqz63b7WjtUfT2xit6Vvbokh7jZkU7hUgt7NEeRR4k8VYS ubpehKPljeOZzWscLGQS6HWQ/2n5Swwamj67f8fGc4zPILtYSa8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:46 2026 by rpki-client